W3C

– DRAFT –
Web Authentication WG

23 February 2022

Attendees

Present
agl, andrebuttner, davidturner, davidwaite, dveditz, elundberg, jeffh, jfontana, johnbradley, jpascoe, kenbuchanan, matthewmiller, mikejones, nadalin, sbweeden, selfissued, timcappalli, wseltzer
Regrets
-
Chair
Fontana, Nadalin
Scribe
jfontana_

Meeting minutes

tony: any update on a face to face meeting
… for the WG
… charter updates?

wendy: not yet.

tony: Tim any update on face to face

selfissue: he's trying to reserve space

tony: 9am to 4 pm. Date would be June during RSA. 9th or 10th

selfissue: 9th is more likely to draw participants.

<selfissued> 9-4 Thursday of RSA, June 9

https://github.com/w3c/webauthn/pull/1695

tim: work in progress

https://github.com/w3c/webauthn/pull/1663

https://github.com/w3c/webauthn/issues/1699

elundberg: seems like fair change to make, more clarity. I can do an editorial change

tony: do in this release?

jbradley: not sure proposal works. it may still accept U2F key, but the bits are not there

elundberg: more like to use preferred over required

shane: should remain in the policy of the RP

elundberg: maybe we should clarify here?

elundberg: need policy to drive decision

jbradley: not sure this is correct way to clarify

elundberg: I will update this one.

https://github.com/w3c/webauthn/issues/1696

tony: this relates to #1637

jeffH: leave this one open.

https://github.com/w3c/webauthn/issues/1694

selfissue: IANA registry. I can do that.

https://github.com/w3c/webauthn/issues/1688

shane: I'd still like this option, but don't think platform vendors will support

agl: it wouldn't be high priority

shane: can't filter to improve experience

agl: this PR is plausible

this issue, not PR

jbradley: behind a policy this won't be a big seller
… having a hard time with this, we can keep it around
… is customization possible
… see challenges platform authenticator may not have an AAGUID

elundberg: can this be put behind flags
… we could use an enterprise authenticator flag

agl: don't want flag to make this look like it is more secure

<selfissued> As recorded in https://github.com/w3c/webauthn/issues/1694, I have submitted the registration request to IANA.

shane: I think it is an active discussion and we need technical folks to catch up
… we close this issue, a similar one will come back

tony: anything happening with caBLE

agl: cable is on FIDO 2

agl: this is still possible

jbradley: two new untriaged

https://github.com/w3c/webauthn/issues/1701

Minutes manually created (not a transcript), formatted by scribe.perl version 185 (Thu Dec 2 18:51:55 2021 UTC).

Diagnostics

No scribenick or scribe found. Guessed: jfontana_

Maybe present: jbradley, selfissue, shane, tim, tony, wendy